fix(ci): bump cryptography to 50.0.0 for pip-audit

[ajlennon]

Summary

• Bump transitive cryptography 49.0.0 → 50.0.0 in uv.lock to clear PYSEC-2026-3552.
• Unblocks the CRA audit job that failed on #34 / run 30981792082.

Hosts / platforms touched

• Cursor (Linux Gtk)
• Claude Code
• Claude Desktop / other stdio host
• Windows Phase 1 (tkinter text-only)
• Docs only (no behaviour change) — lockfile / CI hygiene only

Test plan

Check	Result	Notes
uv run python scripts/test_dialog_ergonomics.py	Pass	unchanged
uvx pip-audit against exported lock	Pass	No known vulnerabilities found
Other unit scripts	Skip	lock-only change

Behaviour contract

• No removal/rename of MCP tools
• No lab IPs / home paths / secrets in tracked files

AI assistance

• AI-assisted (Cursor) — verified local pip-audit clean after bump

Made with Cursor